CVE-2026-44963

CVE-2026-44963 — Veeam Backup & Replication RCE SentinelX द्वारा अनुसंधान भंडार — केवल अधिकृत सुरक्षा परीक्षण और रक्षात्मक उद्देश्यों के लिए। अवलोकन क्षेत्र| विवरण ---|--- CVE ID| CVE-2026-44963 विक्रेता| Veeam उत्पाद| Backup & Replication प्रभावित संस्करण| 12.3.2.4854 सभी v12 बिल्ड सुधारित...

cve-2017-5941-poc-docker-lab

CVE-2017-5941 — node-serialize अविश्वसनीय डी-सीरियलाइज़ेशन RCE PoC ⚠️ केवल लैब / स्व-मूल्यांकन के लिए। केवल उन्हीं सिस्टम पर उपयोग करें जिनके आप स्वामी हैं या जिनका परीक्षण करने के लिए आप अधिकृत हैं । इस रिपॉजिटरी में निम्नलिखित उपलब्ध है: node-serialize = 0.0.4 का उपयोग करने वाले कमज़ोर Node.js ऐ...

CVE-2025-53770

Progetto di Rilevamento CVE-2025-53770 Un kit di strumenti completo per il rilevamento di vulnerabilità progettato per identificare sistemi vulnerabili a CVE-2025-53770 CWE-502: Deserializzazione di Dati Non Affidabili. 🔍 Panoramica Questo progetto fornisce script di rilevamento pronti per l’uso...

SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE

SolarWinds Web Help Desk contains an unauthenticated AjaxProxy deserialization remote code execution vulnerability, letting attackers run commands on the host machine without authentication, exploit requires no special privileges. id: CVE-2025-26399 info: name: SolarWinds Web Help Desk 12.8.7 -...

ManageEngine Desktop Central Java Deserialization

Zoho ManageEngine Desktop Central before 10.0.474 is vulnerable to a deserialization of untrusted data, which permits remote code execution. id: CVE-2020-10189 info: name: ManageEngine Desktop Central Java Deserialization author: king-alexander severity: critical description: | Zoho ManageEngine...

CVE-2026-68771_exploit

CVE-2026-68771 — ComfyUI RCE durch nicht authentifizierte Pickle-Deserialisierung Nicht authentifizierte Remote-Codeausführung in ComfyUI über den LoadTrainingDataset -Knoten. LoadTrainingDataset.execute lädt Dataset-Shards aus dem Ausgabeverzeichnis des Servers mit torch.loadf und...

CVE-2025-68664-LangGrinch-PoC

📑 Indice dei Contenuti 🎯 Riepilogo Esecutivo 📂 Struttura del Progetto...

CVE-2026-50522

🛡️ CVE-2026-50522 — Untersuchung zur Microsoft-SharePoint-RCE-Sicherheitslücke Kritische SharePoint-Deserialisierungsschwachstelle unter aktiver Ausnutzung Erstellt von Pratik Chhetri Berichtsdatum: 2026-07-27 📌 Kurzüberblick...

langgrinch-cve-2025-68664-analysis

Analisi della vulnerabilità LangGrinch: CVE-2025-68664 Panoramica Questo repository contiene un report tecnico che analizza la CVE-2025-68664, nota anche come LangGrinch, una vulnerabilità di injection nella serializzazione che interessa LangChain Core. Il report spiega il contesto della...

CVE-2025-64512-pdfminer-PoC

CVE-2025-64512 — PoC di deserializzazione CMapDB di pdfminer.six Proof-of-Concept per una vulnerabilità di deserializzazione in pdfminer.six che porta all'esecuzione arbitraria di codice durante l'analisi di un PDF appositamente predisposto. SCOPO / DISCLAIMER LEGALE Questo repository è fornito...

Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Composite Application Manager for Applications WebSphere MQ Monitoring Agent

Summary Vulnerabilities in IBM SDK Java Technology Edition that is shipped as part of agent framework in ITCAM for Applications WebSphere MQ Monitoring Agent. CVEs: CVE-2026-41254, CVE-2026-47057, CVE-2026-47058, CVE-2026-47063 and CVE-2026-8400 Vulnerability Details CVEID:CVE-2026-47057...

CVE-2026-63337

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescription receives a javaReturnType value in an untrusted system.describe response and passes it through JSONUtil.tryFill,...

CVE-2026-63337 RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescription receives a javaReturnType value in an untrusted system.describe response and passes it through JSONUtil.tryFill,...

PT-2026-77211

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescription receives a javaReturnType value in an untrusted system.describe response and passes it through JSONUtil.tryFill,...

IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 DoS (7283485)

The version of IBM WebSphere Application Server Liberty running on the remote host is affected by a DoS vulnerability as referenced in the 7283485 advisory. - IBM WebSphere Application Server Liberty is affected by a denial of service caused by insecure deserialization. A low-privileged,...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the deserialize. An attacker can execute arbitrary code by supplying a crafted serialized blob that causes the import and invocation of malicious callables. This can be exploited by a DAG author...

CVE-2026-59242

Apache Airflow's XCom GET /api/v2/.../xcomEntries/key?deserialize=true endpoint passed a string-literal payload through BaseXCom.deserializevalue without the checkforbiddenxcomkeys guard, allowing an authenticated API user with XCom write-and-read access to instantiate arbitrary airflow. classes ...

CVE-2026-59242

Apache Airflow's XCom GET /api/v2/.../xcomEntries/key?deserialize=true endpoint passed a string-literal payload through BaseXCom.deserializevalue without the checkforbiddenxcomkeys guard, allowing an authenticated API user with XCom write-and-read access to instantiate arbitrary airflow. classes ...

EUVD-2026-57312

Apache Airflow's XCom GET /api/v2/.../xcomEntries/key?deserialize=true endpoint passed a string-literal payload through BaseXCom.deserializevalue without the checkforbiddenxcomkeys guard, allowing an authenticated API user with XCom write-and-read access to instantiate arbitrary airflow. classes ...

CVE-2026-59242

Apache Airflow vulnerability CVE-2026-59242: The XCom GET /api/v2/{...}/xcomEntries/{key}?deserialize=true endpoint can deserialize a string-literal payload via BaseXCom.deserialize_value without the _check_forbidden_xcom_keys guard, enabling an authenticated API user with XCom write-and-read acc...